RSA Authentication Manager 8.1 SP 1 patch 1 backups to a Windows Shared Folder are failing after software upgrade
Originally Published: 2015-09-08
Last Modified: 2022-06-20
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1 SP1 P1 and later
Issue
- Windows backup is failing after RSA Authentication Manager 8.1 is upgraded to SP1 patch 1 or later
- The backup is failing from the Operations Console
- Mounting the Windows share from the command line will also fail using the sec=ntlmssp and sec=ntlmsspi options as shown below.
am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test -o user=<Windows_Share_User>,sec=ntlmsspi,uid=1000 Password: <enter password for Windows_Share_User> mount error(95): Operation not supported Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test -o user=<Windows_Share_User>,sec=ntlmssp,uid=1000 Password: <enter password for Windows_Share_User> mount error(5): Input/output error Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
- Mounting the Windows share from the command line succeeds when removing the sec=xxxxx option as shown below:
am81p:~ # /sbin/mount.cifs //<Windows_Share_Server>/<Windows_Share_Folder>/ /opt/rsa/am/backup/test -o user=<Windows_Share_User>,uid=1000 Password: <enter password for Windows_Share_User> am81p:~ #
- Backups to the Local Authentication Manager Server or NFS are working.
Cause
The changes made as part of supporting the NTLMv2 in SP1 Patch 1 enforced Authentication Manager to use the security options ntlmssp or ntlmsspi. If your Windows Shared Folder does not support these security modes, then Authentication Manager will fail to mount the share and fail to perform the backup.
Resolution
Workaround
- Use NFS backup,
- Use internal backup, or
- Change the security mode to NTLMv2 on the Windows machine.
Related Articles
Incompatibility with Encoding of Private Key causes various issues on an RSA SecurID Access Identity Router running SLES12… 205Number of Views Windows Agent failing to authenticate local Group Membership with 30 Secs timeout 126Number of Views RSA SecurID Appliance 3.0 Service Pack 4 Migration Failure at Task 'Importing Certificates' 14Number of Views RSA Identity Governance and Lifecycle RESTful web service response: java.lang.IllegalStateException 294Number of Views Error during migration: Error: Failed to massage migrated data org.postgresql.util.PSQLException: ERROR: update or delete… 57Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Manual synchronization introduced in RSA Authentication Manager 8.2 Service Pack 1 patch 6 Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to verify NTP server synchronization is not working in RSA Authentication Manager 8.x RSA Governance & Lifecycle 8.0.0 Installation Guide
Don't see what you're looking for?